Ministry of Justice Confirms Data Breach Affecting Southport Attack Victims and Families
The Ministry of Justice (MoJ) has disclosed a data breach impacting individuals associated with the 2022 Southport chemical attack. Sensitive and personal information from victim impact statements was accessed following a ransomware incident affecting a third-party IT supplier, identified as Logic Document Management Ltd.
The breach affects a limited number of individuals, including victims, survivors, and family members of those involved in the incident, which occurred at the Arndale Centre in Southport. The MoJ stated that the compromised data included sensitive personal details provided within impact statements, which are typically used to inform judicial sentencing.
Logic Document Management Ltd, a company specialising in document scanning and processing for legal and government entities, was reportedly targeted in the ransomware attack earlier this year. The extent of the compromise and the specific details of the affected individuals' data are still being assessed by the MoJ, which has initiated an investigation and is in the process of notifying those impacted.
Concerns have been raised regarding the security protocols of government contractors handling highly sensitive personal information, particularly concerning victims of violent crime. This incident underscores the persistent vulnerability of outsourced government data to cyber threats, prompting calls for more robust oversight of third-party suppliers handling citizen data.
